net: add OCSP tests.

net/base/ev_root_ca_metadata.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/ev_root_ca_metadata.h"
 
 #if defined(USE_NSS)
 #include <cert.h>
 #include <pkcs11n.h>
 #include <secerr.h>
@@ skipping 268 matching lines @@
   // Wells Fargo WellsSecure Public Root Certificate Authority
   // https://nerys.wellsfargo.com/test.html
   { { { 0xe7, 0xb4, 0xf6, 0x9d, 0x61, 0xec, 0x90, 0x69, 0xdb, 0x7e,
         0x90, 0xa7, 0x40, 0x1a, 0x3c, 0xf4, 0x7d, 0x4f, 0xe8, 0xee } },
     {"2.16.840.1.114171.500.9", NULL},
   },
   // XRamp Global Certification Authority
   { { { 0xb8, 0x01, 0x86, 0xd1, 0xeb, 0x9c, 0x86, 0xa5, 0x41, 0x04,
         0xcf, 0x30, 0x54, 0xf3, 0x4c, 0x52, 0xb7, 0xe5, 0x58, 0xc6 } },
     {"2.16.840.1.114404.1.1.2.4.1", NULL},
-  }
+  },
+
+  // Testing CA - for unittesting only. Not a real CA.
+  { { { 0xf1, 0xad, 0xf6, 0xce, 0x42, 0xac, 0xe7, 0xb4, 0xf4, 0x24,
+        0xdb, 0x1a, 0xf7, 0xa0, 0x9f, 0x09, 0xa1, 0xea, 0xf1, 0x5c } },
+    {"1.3.6.1.4.1.11129.2.4.1"},
+  },

[Ryan Sleevi, 2012/03/09 22:07:54]

Can we not do something like we do for TestRootCerts here? I think that would
avoid any chance of affecting release binaries.

 };
 
 #if defined(OS_WIN)
 // static
 const EVRootCAMetadata::PolicyOID EVRootCAMetadata::policy_oids_[] = {
   // The OIDs must be sorted in ascending order.
   "1.2.392.200091.100.721.1",
   "1.2.616.1.113527.2.5.1.1",
+  "1.3.6.1.4.1.11129.2.4.1",  // for unittests only. Not a real CA.
   "1.3.6.1.4.1.14370.1.6",
   "1.3.6.1.4.1.14777.6.1.1",
   "1.3.6.1.4.1.14777.6.1.2",
   "1.3.6.1.4.1.22234.2.5.2.3.1",
   "1.3.6.1.4.1.23223.1.1.1",
   "1.3.6.1.4.1.34697.2.1",
   "1.3.6.1.4.1.34697.2.2",
   "1.3.6.1.4.1.34697.2.3",
   "1.3.6.1.4.1.34697.2.4",
   "1.3.6.1.4.1.4146.1.1",
@@ skipping 47 matching lines @@
 }
 #else
 bool EVRootCAMetadata::IsEVPolicyOID(PolicyOID policy_oid) const {
   for (size_t i = 0; i < policy_oids_.size(); ++i) {
     if (PolicyOIDsAreEqual(policy_oid, policy_oids_[i]))
       return true;
   }
   return false;
 }
 #endif
 

[Ryan Sleevi, 2012/03/09 22:07:54]

eg:

bool EVRootCAMetadata::IsEVPolicyOID(PolicyOID policy_oid) const {
  if (TestRootCerts::HasInstance() &&
TestRooCerts::GetInstance()->IsEVPolicyOID(policy_oid)) {
    return true;
  }
  return IsIVPolicyInternal(policy_oid)
}

 bool EVRootCAMetadata::HasEVPolicyOID(const SHA1Fingerprint& fingerprint,
                                       PolicyOID policy_oid) const {

[Ryan Sleevi, 2012/03/09 22:07:54]

eg:

if (TestRootCerts::HasInstance() &&
TestRootCerts::GetInstance()->HasEVPolicyOID(fingerprint, oid)) {
  return true;
}

   std::vector<PolicyOID> ev_policy_oids;
   if (!GetPolicyOIDsForCA(fingerprint, &ev_policy_oids))
     return false;
   for (std::vector<PolicyOID>::const_iterator
        i = ev_policy_oids.begin(); i != ev_policy_oids.end(); ++i) {
     if (PolicyOIDsAreEqual(*i, policy_oid))
       return true;
   }
   return false;
 }
@@ skipping 64 matching lines @@
 // static
 bool EVRootCAMetadata::PolicyOIDsAreEqual(PolicyOID a, PolicyOID b) {
 #if defined(USE_NSS)
   return a == b;
 #else
   return !strcmp(a, b);
 #endif
 }
 
 }  // namespace net